Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
File:                     F9E4E14645AE11EF8870C771C4F9AE02.roa (raw, json)
Hash identifier:          R0ve1rGoHZXsOYQBScXwsDxNaaTbtMNOWotF4DpFkvU=
Subject key identifier:   D1:5F:6A:A4:3A:B4:F6:E1:2E:3A:69:BA:9A:F1:3A:3D:38:07:77:4F
Certificate issuer:       /CN=A91BB1F3/serialNumber=750FA57B59156539CB16E54A60A6CEDB5B10EB9E
Certificate serial:       6A
Authority key identifier: 75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
Signing time:             Mon 03 Feb 2025 06:00:17 +0000
ROA not before:           Mon 03 Feb 2025 06:00:17 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     139329
IP address blocks:        103.178.219.0/24 maxlen: 24
                          2001:df0:3ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl
                          rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 05:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB1F3
        Validity
            Not Before: Feb  3 06:00:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a05b71-1431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:05:7b:45:59:6b:ea:88:fa:b3:8f:22:21:
                    31:a9:92:57:9f:ee:91:6a:53:83:64:87:f5:59:76:
                    e6:18:b7:53:c3:7c:f1:c4:4f:04:e9:61:9b:2d:b3:
                    c4:90:8e:4e:07:17:86:f3:59:ab:29:f2:54:cc:48:
                    44:5c:54:b3:c3:7d:c0:77:85:f3:63:24:89:27:32:
                    f7:28:b2:5c:b9:22:af:26:f6:4b:69:ae:ea:b9:8a:
                    e5:33:39:b2:a8:ca:9b:06:08:e3:97:ef:e7:08:05:
                    ba:ea:c9:32:83:c0:57:b0:f9:fe:a9:d7:ea:56:3e:
                    8d:05:a6:7e:bd:2b:b6:02:6d:98:6e:f3:d0:52:7b:
                    db:3b:61:fa:a5:4d:ce:e9:f8:d7:8f:5d:61:52:e7:
                    60:c7:99:71:5b:ab:1a:c8:8b:c0:79:e5:bd:d6:45:
                    eb:83:5d:9d:d4:b6:f4:58:34:01:0f:c7:67:01:c0:
                    5e:59:01:83:ce:41:06:6d:8b:06:3a:68:1e:88:5b:
                    d7:6d:de:b1:25:e9:55:72:b4:44:ad:5c:3e:6c:ef:
                    59:06:34:ef:7b:0b:08:66:db:45:26:27:52:22:a1:
                    1c:89:0f:82:8a:28:97:cc:53:80:fe:a8:5b:c5:fd:
                    e1:37:ca:5f:5e:b7:82:9b:8b:a8:b7:77:03:0c:f8:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5F:6A:A4:3A:B4:F6:E1:2E:3A:69:BA:9A:F1:3A:3D:38:07:77:4F
            X509v3 Authority Key Identifier:
                keyid:75:0F:A5:7B:59:15:65:39:CB:16:E5:4A:60:A6:CE:DB:5B:10:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/dQ-le1kVZTnLFuVKYKbO21sQ654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQ-le1kVZTnLFuVKYKbO21sQ654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB1F3/4297D05245AE11EFB6237870C4F9AE02/F9E4E14645AE11EF8870C771C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.219.0/24
                IPv6:
                  2001:df0:3ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:0f:f1:a2:d6:36:0f:46:1a:ec:05:d7:df:7c:55:0f:8b:
         38:23:90:8e:8d:a7:f2:6b:8d:dd:76:84:de:ab:34:1e:b1:1c:
         5c:f9:89:7c:b2:bb:68:97:3d:71:1a:f9:65:86:b7:3c:4d:2c:
         26:23:c4:e9:59:79:5e:ba:4f:e1:17:78:0a:7b:d7:50:3c:29:
         5a:f1:63:9f:d7:9b:1e:5d:cd:39:f9:9c:9f:0f:83:c3:9a:80:
         0f:34:bf:f9:17:81:cb:89:f1:69:22:96:1c:85:a3:a7:37:fa:
         be:58:d0:4c:53:bc:78:00:f1:a6:d6:ea:77:c6:f1:c8:af:3b:
         8f:cb:e7:ec:ab:4d:48:ed:d3:0f:f4:2f:4d:ee:90:bf:49:3b:
         20:26:0d:54:34:e2:f8:e1:90:c8:4b:5c:d8:aa:15:1d:fb:e4:
         0f:e8:84:5e:cf:49:50:ca:7d:68:3a:1a:dd:53:f6:5a:35:1a:
         be:97:b4:e5:c0:2b:77:c8:8c:f3:b1:00:0a:13:10:fe:54:d7:
         e3:18:ca:d4:e8:7a:8a:fb:e8:31:8c:c7:a7:d6:11:e4:34:00:
         fd:49:e7:8c:d4:32:ce:f3:eb:1f:1f:96:39:8b:2b:77:c7:51:
         e7:34:67:7f:37:cc:63:cc:76:33:2d:83:9b:12:82:58:2e:a7:
         f0:32:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:27 2025 by rpki-client